Kiteworks Email Protection Gateway Cross-Site Scripting Vulnerability
Vulnerability
A cross-site scripting vulnerability has been identified in Kiteworks Email Protection Gateway versions prior to 9.2.0. This issue allows authenticated administrators to inject malicious scripts via a configuration interface. The injected scripts are stored and executed when users interact with the affected user interface.
Impact
Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user interface.
Remediation
Users are advised to upgrade Kiteworks Email Protection Gateway to version 9.2.0 or later.
Added: Feb 27, 2026, 9:22 PM
Updated: Feb 27, 2026, 9:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
4.5remediation
0.0relevance
3.3threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.